TITLE OF THE INVENTION 

DEVICE FOR LIMITING ACCESS TO A CONFINED SPACE 



BACKGROUND OF THE INVENTION 

1) Field of the Invention 

[0001] The present Invention concerns locks for limiting access 
to a confined and secured space, banknote dispensing devices and 
machines, and networks fomied of devices fitted with such locks. 

[0002] It concerns more particularly a "lock of the type including: 

■ a bolt, capable of occupying first and second positions in 
which it is respectively possible or impossible to access the 
confined space, 

■ an electromechanical device, for allowing or preventing the 
bolt from moving from one of the bolt positions to the other, 

■ a control circuit for addressing commands to the 
electromechanical device, and 

■ a communication Interface provided with a temninal forming an 
input to the lock, and arranged so as to be able to be 
connected, via the temiinal, at least indirectly, to a computer 
type management system. 

2) Description of Related Art 

[0003] Such locks are used, for example, in banknote 
dispensing apparatus, better known by the name "cash dispensers", in 
controlling the opening of hotel rooms or in bank vaults, for controlling 
safes. 
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[0004] In the known systems, such as those described, for 

example, in EP Patent Application No. 0 985 790, the means for 
controlling the lock include a microprocessor, a memory and a 
keyboard, arranged such that, in order to access the confined space, 
an operator enters an access code by means of the keyboard. The 
microprocessor checks this code, as a function of information that it will 
search for in the memory, and gives or does not give the command to 
release the bolt. 

[0005] In the aforementioned Patent Application, the code 
entered by the operator is different each time. This code is generated 
synchronously by the lock microprocessor and by a computer external 
to the lock, generally placed at the head office of the company 
responsible for accessing the confined space. The code originating 
from the external computer is transmitted to the operator when he 
starts visiting the cash dispensers, or by telephone before he accesses 
a given cash dispenser. 

[0006] Various variants of locks connected to a computer are 
described in US Patent Nos. &J74^ 5.774.058 . 5,448,660 and 
5,475,378, WO 96-05552 and EP 0,668.423. In these documents, the 
lock is, generally, fitted with a keyboard and a screen, to allow an 
operator, responsible for accessing the confined space protected by 
the lock, to take an active part in controlling the lock. 
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SUMMARY OF THE INVENTION 

[0007] With such solutions, each lock includes autonomous 
processing means. It is thus not possible to provide remote control. 
However, it appears that the security of the persons involved in 
controlling the confined space and that of the objects located therein 
would be considerably improved if the lock could only be operated 
when it receives a command from a place located somewhere other 
than on the site where the apparatus is located. In order to be able to 
guarantee secure remote control, a reliable and practically inviolable 
communication protocol is necessary. 

[0008] It Is an object of the present invention thus to allow more 

secure control of access to confined and secured spaces. This object 
is achieved owing to the fact that the communication interface and the 
control circuit are arranged such that the data originating from outside 
the lock and addressed to the input terminal conform to the following 
protocol: 

■ a first pulse train defining the device concerned; 

■ a second pulse train defining the total length of the message; 

■ a third pulse train including data relating to the command; and 

■ a fourth pulse train for checking that there are no errors. 

[0009] Advantageously, the control circuit includes: 

■ a memory in which there is stored at least one item of data in 
correlation with a code capable of commanding the lock to 
open. 
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■ means for comparing the data and the code, and 

■ a pulse generator for operating the electromechanical device 
when there is a match between the code received and the 
stored data. 

[0010] Such a solution guarantees secure access that does not 

necessarily require permanent monitoring by the management system. 

[001 1] In order to allow the lock history, maintenance and 
surveillance to be monitored remotely, the memory is arranged to 
store, in addition, data relating to the last operations carried out. 
Moreover, the control circuit is arranged so as to be able to address 
data relating to such operations to the management system, when it is 
commanded to do so. 

[0012] In such devices, it is safer for the opening command to 
be given without directly involving the operator in the control of the 
operation. This is why, advantageously, the interface is exclusively 
connected to the management system. 

[0013] The present invention also concerns security devices for 
controlling access to a confined and secured space. It relates more 
particularly to a device including: 

■ a lock, of the type controlled by an access code, arranged for 
limiting access to the space and including a control circuit and 
a communication interface, 

■ data input means allowing an operator to enter the access 
code. 
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■ a coordination device connected to the lock and to the data 
input means, and provided with a connection for connecting 
the lock to a computer type management system. 

[0014] In order to ensure a reliable and secure connection 

between the management system and the device, the coordination 
device, the interface and the control circuit are arranged such that they 
communicate with each other in accordance with a protocol including: 

■ a first pulse train defining the device concerned, 

■ a second pulse train defining the total length of the message, 

■ a third pulse train including data relating to the command, and 

■ a fourth pulse train for checking that there are no errors. 

[001 5] A device of this type is well suited to simultaneous 
monitoring of several locks. It therefore further includes a bus 
connecting the locks to the coordination device. 

[0016] The device described hereinbefore finds application in 
the field of cash dispensers, which include: 

■ a cash box defining a confined space intended to contain the 
notes, and provided with a door, 

■ a lock of the type controlled by an access code, for allowing or 
preventing the door from opening and thus limiting access to 
the cash box, 

■ a dispensing mechanism for removing the notes from the cash 
box, 

■ data input means allowing an operator to address commands 
to the cash dispenser, 

■ a coordination device connected to the data input means, and 
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■ connecting means for connecting the coordination device to a 
management system. 

[0017] In order to allow real time monitoring and management of 
the cash dispenser, while simplifying the structure of its lock, and 
guaranteeing reliable and secure relations, the lock is connected to the 
coordination device from which it receives access code carrier signals. 
In this cash dispenser, the lock and the management system 
communicate with each other in accordance with a protocol including: 

■ a first pulse train defining the device concemed, 

■ a second pulse train defining the total length of the message, 

■ a third pulse train including data relating to the command, and 

■ a fourth pulse train for checking that there are no errors. 

[0018] Advantageously, the management system, the 
coordination device and the cash dispenser lock are arranged such 
that the data originating from the management system prevails over 
that originating from the data "input means. Consequently, it is 
possible to prohibit access to a cash dispenser if a doubt arises, from 
the management system, even during the cash box opening 
procedure. 

[0019] In order to ensure optimum working conditions, devices 
such as those described hereinbefore are advantageously integrated in 
a management network for controlling access to confined and secured 
spaces. In this network, each device includes: 

■ a lock for limiting access to the confined space, the lock 
including: 
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an electromechanical device arranged for allowing or 
preventing access to said space, 
a control circuit including a memory in which there is 
stored at least one data item in correlation with a code 
capable of commanding the lock to open, means for 
comparing the data and the code, and a pulse generator 
for operating the electromechanical device when there is 
a match between the code received and the stored data, 

■ data input means arranged to allow an operator to enter the 
access code, and 

■ a coordination device connected to the lock and to the data 
input means. 

[0020] In this network, the control circuit and the coordination 
device are arranged such that the confined space is only accessible if 
the access code matches the memory data, and the computer does 
not prevent access. In order to guarantee a secure and reliable 
connection, the computer and the lock communicate with each other in 
accordance with a protocol including: 

■ a first pulse train defining the device concerned, 

■ a second pulse train defining the total length of the message, 

■ a third pulse train including data relating to the command, and 

■ a fourth pulse train for checking that there are no errors. 

[0021] Advantageously, and in order to increase security, the 
control circuit of each of the devices is arranged such that it only 
address control pulses if the code matches the stored data and the 
computer gives its agreement. 
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BRIEF DESCRIPTION OF THE DRAWING(S) 

[0022] Other features and advantages of the invention will 
appear from the following description, made with reference to the 
annexed drawing, in which: 

■ Figures 1 and 2 show, according to the invention; respectively 
and schematically, a lock and a cash dispenser network. 

DETAILED DESCRIPTION OF THE INVENTION 

[0023] Figure 1 shows a lock 10, which includes a bolt 12 
capable of occupying a first, and second position, one of which, called 
the closed position, is for preventing access to a confined space, for 
the purpose of securing said space. It is provided with a rack or 
toothed part 12a. The movement of bolt 12 is ensured by a control 
lever 14, accessible from outside the confined space and provided with 
a toothed sector 14a meshed with toothing 12a. 

[0024] Lock 10 further includes an electromechanical device 16 
provided with a stop 18 and an electromagnet 20 controlling the 
movement of stop 18, which impedes or allows the movement of bolt 
12. The device is controlled by a circuit 22, which receives commands 
from an interface 24, provided with a first terminal 24a connected to 
control circuit 22 and a second terminal 24b, for allowing connection 
with the exterior, as will be explained hereinafter. 

[0025] Circuit 22 essentially includes a memory 22a, in which 
data is stored, a comparison circuit 22b, for comparing the data 
received from interface 24 with that stored in memory 22a, and a pulse 
generator 22c, arranged such that, if the data received in reference 
matches the memory data, it gives the command to electromagnet 20 
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to release bolt 12. Advantageously, memory 22a can also store data 
relating to the last operations carried out on lock 10. 

[0026] All the elements of the lock, with the exception of control 
lever 14 and output 24b of interface 24, are inside the confined space. 

[0027] Figure 2 shows schematically a management network for 
a set of security devices 26 for controlling access to confined and 
secured spaces, which will be described in more detail hereinafter, and 
a management system essentially including a central computer 28 and 
connecting means 30, generally formed of a cabled network. 

[0028] This Figure shows In detail only one of security devices 
26. It includes two confined spaces defined by cash boxes 32 and 34, 
respectively fitted with doors 36 and 38 and locks 40 and 42 of the type 
described with reference to Figure 1 . 

[0029] Cash box 32 forms an integral part of a cash dispenser 
44. it contains a note dispensing mechanism 46. The notes are 
delivered through a slot 48. 

[0030] Cash dispenser 44 further includes data input means 50 
formed of a keyboard and a magnetic or smart card reader, and 
display means formed by means of a screen 52. 

[003 1] A coordination device 54, advantageously fonned of a 
microprocessor, receives the commands given by data input means 50 
and interprets them in order to operate mechanism 46 and screen 52. 

[0032] Coordination device 54 is permanently connected to 
computer 28, via network 30, in order to monitor transactions and, if 
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necessary, to interrupt them if a problem or fraudulent use is observed. 
Data is transmitted using a high security encoded language. It should 
be noted that one or more security devices 26 can be connected by a 
same line 30 to central computer 28. 

[0033] Cash box 34 is a night depository with a swiveling door 
56, allowing boxes that are not shown in the drawing to be inserted 
therein, controlled by a lock 58. 

[0034] Security device 26 is arranged in a box 60 fitted with 

doors and cut out portions that are not referenced, to allow access to 
cash boxes 32 and 34, slot 48, door 56 and data input means 50 and 
screen 52. 

[0035] As appears in Figure 2, locks 40, 42 and 58 are 
connected, by means of a bus 62, to coordination device 54 and, via 
said device, to central computer 28. The connection between the locks 
and device 54 can be achieved by means of a four-wire line, such as 
those used in the field of telephony. 

[0036] If an operator has to command one or other of locks 40, 
42 or 58 to open, he addresses a message to the coordination device 
via data input means 50, for example by means of a card and/or a 
figure entered on the keyboard. This message contains data relating 
to the identity of the operator, the lock concerned and the code which, 
when compared to the data contained in memory 22a, allows access to 
one of the confined spaces. 

[0037] Since data input means 50 are connected both to locks 
40, 42 and 58 and to central computer 28, via coordination device 54, 
the message can be analyzed by central computer 28 before the lock 
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concerned is opened. Authorization to open can be given in real time, 
wliich means tliat each time a message enters, computer 28 analyzes 
it and either gives its agreement or does not. Authorization may also 
be given in advance, in which case computer 28 gives coordination 
device 54, in advance, the indications relating to the messages that 
have to be taken into account. 

[0038] Transmission of data between locks 40, 42 and 58 and 
coordination device 54 is achieved in accordance with a protocol 
including: 

■ a first pulse train T1 defining the lock concerned, with an 
indication as to whether it is transmitting or receiving, 

■ a second pulse train T2 defining the total length of the 
message, 

■ a third pulse train 13 including data relating to the command 

transmitted, and 

■ a fourth pulse train T4 for checking that there are no errors. 

[0039] The length of T1 , T2 and T3 14 is fixed, generally 8 bits 
(or 1 byte). In most cases, this is sufficient to meet requirements. 
However, the length of T3 is variable and can have up to 255 bytes. If 
that is not enough, the message can be broken down. This may, for 
example, be necessary when computer 28 asks a lock to transmit to it 
the data relating to the last operations carried out on the locks. 

[0040] This solution not only allows security to be increased in 
the control of access to confined spaces, since the locks can be 
pemrianently monitored, but also allows their cost to be reduced, since 
the internal control means can be limited. It is thus no longer 
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necessary to ask an operator, who has to go to the site, to interrogate 
control circuit 22 to find out the last operations carried out on one or 
other of the locks. This can occur either in real time, or periodically. 
There is no risk either of a door remaining open inadvertently or by 
erroneous handling. 

[0041] The programs contained in computer 28 relate both to 
the dispensing of banknotes and to the management of the locks. It is 
also possible, via a network that is not shown in the drawing, for the 
computer to address data relating to the dispensing of notes to a first 
computer and data relating to the locks to a second, the persons 
responsible for these two aspects being different. 

[0042] It should be noted that the connection between 
coordination device 54 and computer 28 is subject to the greatest care 
in known systems and the addressed messages thus have to be 
encoded with a maximum of security. Consequently, the risk of 
intervention on the line in order to open the lock in an unauthorized 
manner is practically nil. 

[0043] The network described with reference to Figure 2 relates 
to the dispensing of banknotes and to the management of night 
depositories. It goes without saying that the means implemented could 
be used for other purposes, particularly for managing safes in a bank 
safe deposit vault. 
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